Maricopa County: 


Forensic Election Audit 
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° 2.1M ballots processed by hand 
° Over 1,500 people involved 


¢ Over 100,000 hours of time 
contributed 
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° The perimeter was secured at the 
coliseum 


e COVID checks & access validation 


° Ballots & election equipment were 
secure in corrals 


° 24/7 video surveillance & law 
enforcement guard 
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e All counters were Maricopa 
residents who voted in the last 
election. 


¢ Each person was run through a 
Standard background check. 


e All three counters counted “blind” 
without any talking. 


° Roughly every ~50 ballots tallies 
were compared and needed to 
agree or be redone. 
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Paper ExamiatiOn (PE) 


° High quality DLSR images captured 
of the front and back of all ballots 


e Microscope images captured of key 
ballot locations 


° Over 140TB of data storage for PE 
alone 
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Current Status 


° Complete e Review of Splunk Logs and Routers via 


, Settlement Agreement terms. 
¢ Hand-counting of all federal races g 


: letion of Paper Analysi 

° Image and microscope capture of all Completion of Paper Analysis 
ballots 

° Review & Comparison of Official Results 


° Analysis of the Voter Rolls 


e Expected Soon 
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Current Status 


¢ No Longer In Scope ° Review of ICX Devices 
e Canvasses to confirm voter rolls e Systems never provided by the 
° Removed from scope of work. County. 


¢ Review of tabulator configuration to ° REVIEW. i provisional ballots 
check internet configuration. * Provisional Ballots Never 
Provided by County. 


e Hardware tokens never provided 
by the County. e Review of undeliverable ballots 


° Review of Voter Roll System ¢ Undeliverable ballots never 


° Systems accessing rolls never provided by county. 


provided by the County. 
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Ballots & Tallying - Background 

° Ballots that are damaged or can’t be processed by a tabulator are duplicated. 

° Damaged Sent to Duplicates (DSD) are the originals, DUPs the Duplicate. 


e There should be one DSD per DUP. 


° There should be a unique serial number to match up a DSD to its DUP. 


° Duplicate ballots should be stored separately from original ballots. 
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Findings 


° Duplicate ballots comingled 


wan enigma: oe or [BO eWription| sai'YPE |] Bee 


| _— OF Berea tere rise error seach atte | 
° Duplicated ballots with incorrect 
& missing serial numbers 


° Duplicates that reuse serial 
numbers 


¢ More duplicates than original 
ballots 


ete ae -— 1 __ 7 hele Dup 
Biden 


© Copyright 2021 - Cyber Ninjas - All Rights Reserved - Slide 16 


@ C Lj b er O) ie e e 
ax Ninjas Ballots & Tallying - MC Forensic Audit 


Findings 
% 
Pamaged Duplicate expected Differenc 


° Duplicate ballots comingled with Descripti| Sent to % To 
oridainal ballots on Duplication Ballots Candidat e To 
g (DSD) (DUP) Candidat 


* Duplicated ballots with incorrect 
& missing serial numbers p Bien {Boa 67 | LOaL 73s | Ua t Ce 
pamsged |p 


° Duplicates that reuse serial Duplication Ballots enone PPittdifenc. 
numbers (DSD) (DUP) candidat 


¢ More duplicates than original 


ballots 1,064,336 | 1,065,266 


e Extra DUPS favor Trump & 
Jorgenson 


e Extra DUPS favor McSally 
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Tally Results - (Based on DSD) 
Write In / 
McSally Kelly Over / Total 
Under 
Maricopa 
County | 983,662 | 1,064,336 | 40,398 | 2,088,396" 
Forensic 
Audit 
Official 
Maricopa = | 984 203 | 1,064,396 | 40,964 | 2,089,563 
County 
Canvass 
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Tally Results - (Based on DSD) 


Jorgens Write In / 
Trump | Biden a Over / Total 
— 


Maricopa 
Forensic Audit 
Official 
Maricopa ae 66 | 1, _ 7 31.705 21.419 2,089,5 
County 63 
Canvass 


* Slight dE LEA Presidential 62@nat} ba ue (BOA biffdrences if HABdounts actos{ YYAHhlots 
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Findings 


At least a batch of 50 ballots was run through the tabulators twice. 


TO VOTE: COMPLETELY FILa THE 
OVALS) NEXT TO YOUR CHOICES) 
UKE BELOW 
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== ms 


P “ 2 FFIC IAL BALLOT TO) OTE: CALE TEL YT FLL. THE Ts TE | AR Ei Co TE 
TO vore FOR A WRITEIN CANDIOATE: Ca CALS) MET TO ie Sees) || RT Tee A Te Te 
ET PS WE PCP WE CEES NERAL ELECTION UME BELOW TEXT AND) COMPLETELY FILL THE OVAL 

EXT ANO COMPLETELY FILL THE OVAL LURE BELOW 

TOW DATE: - =e i aes 
MBER 3, 2530 | DOE, JANE o | John Doe = 
INTY OF MARICOPA, STATE OF ARITONA = he! 

Seposiions snd queskora posted in foe poling place, peste om the sample Gallet anal previdecd ais all cnaihed munriy belts 
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065) ROMA 


= ae MARICOPA COUNTY 
COMMUNITY COLLEGE DISTRICT on IT COMMURITY COLLEGE DES TRICT 


AT-LARGE AT-LARGE 
(VOTE FOR NOT MORE THAN 1) ane a (OTE FOR MOT MORE THAN 1) (MOTE PO OT MORE THAN 1) 


THOR, LINDA | 


THOR, LINDAM. @® 


“THOR, LINOAS. @& ‘GALLARDO, STEVE (DEM ry 
BOGGS, SHELL RICHARDSON : = 
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Findings 


e Several UOCAVA ballots have been double-counted 
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Official Results - Background 


e Official Canvass - Tallies of the ballots cast 
° Per candidate, per precinct, provisional, etc. 


° VM55 Final Voted File - A list of all the people who cast a ballot in the election 
¢ Indicates method of voting and other details 


° VM34 Full Voter File - A list of all people eligible to vote 
° Released on a monthly basis 
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° EV32 Early Voting Sents - A list of all the ballots mailed out 
° Includes the date mailed, the address mailed to, the ballot type, etc. 


e EV33 Early Voting Returns - A list of all the ballots received for Early Voting 
° Includes the date returned and the method (Mail-in or in Person) 
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Election System Balance 


° If the following situation ° You would expect 


happened ¢ The Official Canvas has a total of 30 votes 
° 10 people mailed in a ballot across all the candidates / precincts etc. 


° 10 people voted early in ° The VM55 should show a list of 30 people: 
person ¢ 10 people who voted via mail-in 


° 10 people voted on election ° 10 via Early Voting in Person 
day in person ¢ 10 via Election Day in person 


e EV32 Sents would show 1O ballots mailed 


e EV33 Returns would show 10 mail-in ballots 
received, and 10 mail-in ballots for EV In 
Person 


None of these system balance. 


© Copyright 2021 - Cyber Ninjas - All Rights Reserved - Slide 25 


re ay mg , Official Results - MC Forensic Audit 
Findings 


° Official Canvass has 3,432 more ballots cast than the list of people who show as 
having cast a vote (VM55) 


° 9,041 mail-in voters show returning more ballots (EV33) than they were sent (EV32). 


° 277 Precincts show in the Official Canvass as having more ballots cast than people 
who showed up to vote (VM55) for a total of 1,551 excess votes. 


° There are 2,472 ballots shown in EV33 that don’t have corresponding entries in the 
VM55, and only 2,042 ballots show as rejected in the Official Canvas for a 
discrepancy of 430. 


¢ 397 mail-in ballots show as received (EV33) that never show as sent (EV32). 


° 255,326 Early Votes show in the VM55 that do not have a corresponding EV33 entry. 
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Moving - Background 


° Individuals who voted were compared against a commercial database called 
Melissa to see who moved before the October 5" cutoff. 


Melissa Personator 
e Checks addresses associated with a user 


¢ Shows prior and current addresses 


° Tracks moves and move dates 
° Tracks date-of-birth and death dates 
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¢ 23,344 voters voted via mail-in ballot even though they show in Melissa as having 
moved, and no one with the same last name shows as living at the address. 


° 2,382 voters voted in-person even though they show in Melissa as having moved 
out of Maricopa County. 


° 2,081 voters moved out-of-state during the 29 days before the election and were 
given a full ballot instead of a presidential-only ballot. 
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Voter Rolls - Background 


Registration dates do not generally 
change unless to correct a mistake. 


Are there any circumstances in which someone's registration date can change? 
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Voter Rolls - Background 


° AFFSEQ is a unique number found in the voter roll system that is 
associated with a single transaction to a single user. 


° That change transaction has an image to go along with it to reference the 
document that authorized the change. 


° AFFSEQ’s should be unique and only happen once and definitely shouldn’t be 
Shared by users. 


° A.R.S. 16-152 requires that complete names be Se 


On Aug 30, 2021, at 11:52 AM, voterinfo - RISCX <voterinfo@nsc.maricoy 


Good morninc The AFFSEQs refers to Affidavit sequenc tion by a voter wil 
] 


result in an affidavit. The affidavit could be a modification to your registration such as address change, 


party change or an updated signature as an example. An affid avit identifier is also applied to the affidavit 
envelope, or a provisional ballot used during an election. These identifiers are unique to each transition 
and never repeated 


© Copyright 2021 - Cyber Ninjas - All Rights Reserved - Slide 32 


Ninjas Official Results - MC Forensic Audit 


ax cyber Ballots & Tallying - MC Forensic Audit 
.) 


“Ninjas 


Findings 


° Potentially as many as 5,047 individuals who voted in 
more than one county for up to 5,295 votes. Number 
oe Description 
° 393 voters with incomplete names voted in the of voters 
° 198 individuals registered after the October 15th only 


cutoff and voted in the election. Last name is 9 
° 2,861 voters have shared an AFFSEQ number with an initial only 
another voter at some point. No last name 


an initial only 


° 186 people potentially have duplicate voter IDs that 
both voted. 


¢ 282 potentially deceased voters voted in the election. First name Is 
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